$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: 6gUamOjtPQCR7eCrK9L5UpTjQ05fFtToYzhy1UfLUlg= Subject key identifier: FC:A0:CE:CE:5C:C4:7D:C4:C7:FD:F9:FF:59:4C:A0:B8:0B:9B:5F:FA Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 6CEADD7DDE75A86AF3A034B11AC19B338D46433A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 8F Signing time: Tue 17 Jun 2025 02:41:27 +0000 Manifest this update: Tue 17 Jun 2025 02:36:27 +0000 Manifest next update: Fri 20 Jun 2025 06:51:27 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: 0vqEjbzJ2oTN8YUg5plSL7bME0j1cq9HckeFz0ga7Y8=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: 5wgnU/0dthNg8AkcCJ56tpd0Ki3KR84FDg0/EGmE3ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ea:dd:7d:de:75:a8:6a:f3:a0:34:b1:1a:c1:9b:33:8d:46:43:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jun 17 02:36:27 2025 GMT Not After : Jun 20 06:51:27 2025 GMT Subject: CN=FCA0CECE5CC47DC4C7FDF9FF594CA0B80B9B5FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:5d:aa:e1:c4:6e:de:ee:e0:21:89:bf:2d: 80:1c:ad:2b:e9:4b:e0:52:d5:c6:c3:17:8f:1e:c4: 30:49:8e:ac:40:93:2c:de:3b:0c:d8:6f:99:b7:65: d3:ce:1a:ec:a5:82:c1:f7:d3:e9:19:11:7b:22:28: 3a:db:2a:9a:53:62:02:eb:44:c8:68:0a:f5:4f:aa: d0:46:35:82:6c:c4:1f:41:8f:26:6b:f9:d5:cb:57: b8:b7:bf:bf:09:c9:c9:03:c1:2f:28:25:5a:26:0a: d0:fc:35:c0:57:b7:d3:c4:8e:be:4e:66:77:fe:7c: 16:ff:f1:6e:31:a8:01:f1:21:01:75:2f:02:f7:d3: 02:03:6a:23:66:1d:26:e6:75:97:87:d6:41:97:a1: e7:ec:57:74:42:44:e3:8e:29:43:e2:a2:92:fe:6b: 37:f2:39:e2:e7:6d:1f:f4:56:4c:3d:f3:b9:bd:12: 8e:a7:19:aa:79:08:d3:82:27:21:ef:4b:60:71:77: 7d:19:e6:55:81:ec:76:a8:82:0d:eb:e4:92:7d:a7: e7:0a:f5:a2:56:e5:15:ba:3f:05:b2:06:41:54:9b: 10:8a:ef:34:d6:20:a1:25:56:77:45:89:93:30:4c: 26:68:86:4b:f3:c7:84:e9:4e:1f:2b:35:8e:2c:c7: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:CE:CE:5C:C4:7D:C4:C7:FD:F9:FF:59:4C:A0:B8:0B:9B:5F:FA X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:e9:7d:51:e2:01:72:19:46:90:1c:12:5c:ff:52:5f:a1: 6e:b6:30:39:71:f4:d5:f1:9d:71:e4:5b:93:b1:52:5e:66:4c: cd:39:3a:72:5b:12:94:59:62:e1:87:ba:ba:0d:c7:5f:4b:1e: 9f:e3:ce:3b:dc:67:a8:65:dd:1b:5d:10:24:03:2a:94:4a:d8: 71:59:5e:c6:36:2a:67:2c:2e:49:9a:34:6c:f4:e7:a6:7a:98: a6:2e:3f:90:1d:e1:fc:c3:2b:2a:33:1e:e7:db:7f:87:5c:19: 49:68:e9:b2:20:15:6c:4a:17:7e:6f:d1:e2:72:2a:b3:ec:ff: 49:1e:46:3b:26:54:7b:da:b5:8c:69:01:d2:72:cb:4a:16:42: 21:e5:b2:06:5c:6b:7a:81:9b:76:eb:66:0a:21:aa:ec:df:96: 21:79:88:0f:3b:10:7b:8a:f2:5e:7d:3c:72:a1:c0:e7:70:f7: 95:aa:4b:57:f4:e8:c6:6c:93:e5:8b:7c:55:91:4d:9e:9a:d8: b2:7e:bb:48:f1:e4:57:a2:9e:37:b0:a2:54:f1:6d:80:45:6e: e5:e4:f1:20:ec:87:ed:de:52:a1:10:51:d8:06:f6:f4:dc:8e: d3:e8:fa:ba:e9:3e:8a:d8:ed:d4:d2:9c:c1:a9:60:c3:17:9b: e1:2e:2d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOrdfd51qGrzoDSxGsGbM41GQzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA2MTcwMjM2MjdaFw0yNTA2MjAwNjUxMjdaMDMxMTAvBgNV BAMTKEZDQTBDRUNFNUNDNDdEQzRDN0ZERjlGRjU5NENBMEI4MEI5QjVGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs212q4cRu3u7gIYm/LYAcrSvp S+BS1cbDF48exDBJjqxAkyzeOwzYb5m3ZdPOGuylgsH30+kZEXsiKDrbKppTYgLr RMhoCvVPqtBGNYJsxB9BjyZr+dXLV7i3v78JyckDwS8oJVomCtD8NcBXt9PEjr5O Znf+fBb/8W4xqAHxIQF1LwL30wIDaiNmHSbmdZeH1kGXoefsV3RCROOOKUPiopL+ azfyOeLnbR/0Vkw987m9Eo6nGap5CNOCJyHvS2Bxd30Z5lWB7Haogg3r5JJ9p+cK 9aJW5RW6PwWyBkFUmxCK7zTWIKElVndFiZMwTCZohkvzx4TpTh8rNY4sxxEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/KDOzlzEfcTH/fn/WUyguAubX/owHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWb6X1R4gFyGUaQHBJc/1JfoW62MDlx9NXx nXHkW5OxUl5mTM05OnJbEpRZYuGHuroNx19LHp/jzjvcZ6hl3RtdECQDKpRK2HFZ XsY2KmcsLkmaNGz056Z6mKYuP5Ad4fzDKyozHufbf4dcGUlo6bIgFWxKF35v0eJy KrPs/0keRjsmVHvatYxpAdJyy0oWQiHlsgZca3qBm3brZgohquzfliF5iA87EHuK 8l59PHKhwOdw95WqS1f06MZsk+WLfFWRTZ6a2LJ+u0jx5FeinjewolTxbYBFbuXk 8SDsh+3eUqEQUdgG9vTcjtPo+rrpPorY7dTSnMGpYMMXm+EuLak= -----END CERTIFICATE-----Generated at Tue Jun 17 17:33:25 2025 by rpki-client